Currently I push to the GitHub Container Registry (GHCR) with my Personal Access Token.

Is there a method to deploy a PRIVATE project "GitHub Container Registry" such that a token will only have access to specified images rather than all of my private images? It seems they have funcitonality that will do this called "Deploy Key" but that it only works for the Git Repository itself, not artifact repositories (like GHCR).

I don't see anything documented under

At work we use GitLab and I know it does have per-project Deploy Keys for the container registry

  • 1
    We have the same problem. Did you find a solution? But it looks like there is just no way to do proper authentication that does not depend on a personal GitHub account.
    – michidk
    Sep 15, 2022 at 6:23
  • Same issue here, deploy keys are not supported on GHCR. The only solution seems to be to use a PAT with a full Docker login flow, or by writing a Docker registry "proxy" that removes the authentication or moves it to e.g. the URL schema.
    – Niek
    Oct 18, 2022 at 7:18


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.